Privacy and POPIA Notice

1. Who we are

Mwalimu Resources (Pty) Ltd is the responsible party for the personal information described in this notice.

Detail	Particulars
Responsible party	Mwalimu Resources (Pty) Ltd
Company registration number	Registration number to be confirmed
Registered office	Unit 4 Blydepoort, 19 Seinheuwel Cres, Middelburg, 1050, South Africa
Information Officer	Name and email of the Information Officer to be confirmed
General email	info@mwalimuresources.com
Telephone	+27 69 978 5201

2. What personal information we collect

We collect only what we need in order to respond to you and to run our business.

• Information you give us through the contact form or by email: your name, email address, the enquiry type you select, and the content of your message.
• Information you give us in the course of a commercial relationship: contact details of representatives, company details, banking and compliance documentation where a transaction requires it.
• Information collected automatically by our hosting provider: IP address, browser and device type, pages requested, and the date and time of the request, retained in standard server logs.

We do not knowingly collect special personal information through this website, and we do not collect the personal information of children through it.

3. Why we process it, and on what basis

Purpose	Lawful basis under POPIA
Responding to your enquiry	Your consent, and our legitimate interest in dealing with enquiries
Negotiating and performing contracts	Necessary for the conclusion or performance of a contract
Supplier, customer and counterparty due diligence	Compliance with an obligation imposed by law, and legitimate interest
Security, fraud prevention and site integrity	Our legitimate interest, and legal obligation
Keeping records for tax, audit and regulatory purposes	Compliance with an obligation imposed by law

We do not sell personal information, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We share personal information only where it is necessary, and only with recipients who are required to protect it.

• Service providers acting as operators on our behalf, including website hosting, email and IT support.
• Professional advisers, including auditors, attorneys and technical consultants, where they need it to advise us.
• Regulators, law enforcement and other authorities, where we are legally required or permitted to disclose it.
• Counterparties to a transaction, where you have been introduced as a representative and disclosure is necessary to conclude or perform it.

Some service providers may process information outside South Africa. Where that happens, we take reasonable steps to ensure the transfer meets the requirements of section 72 of POPIA, including that the recipient is subject to a law, binding corporate rules or agreement providing an adequate level of protection.

5. How long we keep it

We keep personal information only for as long as it is needed for the purpose it was collected for, or for as long as the law requires.

• General enquiries that do not lead to a relationship: normally up to 24 months.
• Records relating to a contract or transaction: at least five years after the relationship ends, as required by tax and companies legislation.
• Server logs: short retention periods set by our hosting provider for security and diagnostics.

6. How we protect it

We apply reasonable technical and organisational measures to protect personal information against loss, unauthorised access and unlawful processing, including access controls, encryption in transit, and confidentiality undertakings with our operators.

If a security compromise affects your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.

7. Your rights

Subject to POPIA, you have the right to:

• be told what personal information we hold about you, and request access to it;
• request that inaccurate, irrelevant, excessive, out of date, incomplete, misleading or unlawfully obtained information be corrected or deleted;
• object, on reasonable grounds, to our processing of your personal information;
• withdraw consent where our processing relies on consent, without affecting processing already carried out;
• ask that we stop sending you direct marketing; and
• lodge a complaint with the Information Regulator.

To exercise any of these rights, contact our Information Officer. We may need to verify your identity before acting on a request. Access requests are handled under the procedure set out in our PAIA Manual.

8. The Information Regulator

You may complain to the Information Regulator of South Africa.

• Address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
• Postal: PO Box 31533, Braamfontein, Johannesburg, 2017
• Email: complaints.IR@justice.gov.za
• General enquiries: enquiries.IR@justice.gov.za

9. Changes to this notice

We may update this notice from time to time. The date at the top of this page shows when it was last revised. Material changes will be brought to your attention where practicable.